MGASA-2015-0198
- Source
- https://advisories.mageia.org/MGASA-2015-0198.html
- Import Source
- https://advisories.mageia.org/MGASA-2015-0198.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2015-0198
- Related
- Published
- 2015-05-06T16:44:10Z
- Modified
- 2015-05-06T16:34:35Z
- Summary
- Updated qt3 qt4 & qtbase5 packages fix security vulnerabilities
- Details
-
Updated qt3, qt4, and qtbase5 packages fix security vulnerabilities:
It is possible to construct invalid BMP (CVE-2015-1858), ICO (CVE-2015-1859) and GIF (CVE-2015-1860) images that lead to buffer overflows.
Qt3 is only vulnerable to the CVE-2015-1860 issue with GIF images.
- References
-
- https://advisories.mageia.org/MGASA-2015-0198.html
- https://bugs.mageia.org/show_bug.cgi?id=15750
- https://lists.fedoraproject.org/pipermail/package-announce/2015-April/155424.html
- https://lists.fedoraproject.org/pipermail/package-announce/2015-April/155927.html
- http://lists.qt-project.org/pipermail/announce/2015-April/000067.html
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:4 / qt3
Package
- Name
- qt3
- Purl
- pkg:rpm/mageia/qt3?distro=mageia-4
Mageia:4 / qt4
Package
- Name
- qt4
- Purl
- pkg:rpm/mageia/qt4?distro=mageia-4
Mageia:4 / qtbase5
Package
- Name
- qtbase5
- Purl
- pkg:rpm/mageia/qtbase5?distro=mageia-4